Visitor, customer or supplier

I AM A VISITOR OF THE WEBSITE, AND/OR (A CONTACT PERSON WITH) A CUSTOMER OR SUPPLIER

1 How do we obtain your personal data?2 Which personal data do we collect and why?3 What are the legal grounds for processing your data?4 Who do we give access to your personal data? 5 How long do we retain your personal data? 6 What are your rights? 7 How to contact us? 8 Changes to this Privacy Notice

1 How do we obtain your personal data?

1.1 We may collect personal data from you when in connection with the performance of any activities that form part of the operation of our business as described below or when you use our website and its applications.

1.2 We may collect or obtain such data because you give it to us (for example in a form on our website), because other people give that data to us (for example your employer or third party service providers that we use to help operate our business), or because it is publicly available.

We may also collect or obtain personal data from you because we observe or infer that data about you from the way you interact with us.

1.3 Where we are provided with personal data about you by other parties, we use reasonable efforts to include clauses into the contract with this party that will require them to comply with the privacy laws and regulations relevant to that information; this may include, for example, that this party has provided you with a proper information notice and has obtained any necessary consent for us to process that information as described in this Privacy Notice.

2 Which personal data do we collect and why?

2.1 The personal data that we collect or obtain may include: identification data (such as name, address (private/work), phone number (private/work), e-mail address (private/work), country of residence, electronic identification data (cookies, logged data, IP addresses, your browser type and language, your access times,...); personal characteristics (such as age, gender, date of birth, place of birth, civil status, nationality); your financial specifics (such as your bank account number); lifestyle and social circumstances; family circumstances (for example, your marital status and dependents); employment and education details (for example, the organization you work for, your job title and your education details); your postings on any blogs, forums, wikis and any other social media applications and services that we provide; details of how you use our services; details of how you like to interact with us and other similar information).

2.2 The types of personal data that we collect will vary depending on the nature of the services that we provide or how you use our website, such as:

• Commercial relationship performance - We have commercial relationships with companies - customers and suppliers - in the context of which your personal data may be shared with us. For example, we might use your personal data for contact, accounting, invoicing, or delivery purposes, or to provide you with technical-commercial information and information regarding our products and services. • Contact us – if you contact us through the website (via social media, the contact form or by phone), we ask you for information such as your name, address and email address so we can manage and respond to your questions and comments submitted through our website. • Newsletter – if you would like to receive updates and announcements regarding our products and services, we ask for your name and email address so we can send you the newsletter.• Information we automatically collect from you – if you make use of our website we automatically collect or obtain personal data from you because we observe or infer that data about you from the way you interact with us or others. We use this aggregated data to improve your experience when you use our website (for example to provide you with a more personalized experience and draw your attention to information about our services that may be of interest to you) and ensure that it is functioning effectively. For example, we (or our service providers) may use cookies (small text files stored in a user’s browser) which may collect personal data. • Marketing purposes – with your (if necessary free, informed, specific and unambiguous) consent, we use your data for marketing purposes, such as analyzing and maintaining our activities, internal management, improve our website, products and services, market research, and improve our customer service.

3 What are the legal grounds for processing your data?

3.1 We process your personal data for the above mentioned purposes:

a) because the information is required for contract performance with our customers and suppliers, including (but not limited to) accounting, billing and deliveries; orb) to comply with legal obligations;c) because of our legitimate interests, such as (but not limited to) the effective operation of our business, delivery of our services, and performance of our contracts with customers and suppliers, in so far as your interests do not override our interests.

3.2 Where we are legally required to obtain your explicit consent to provide you with certain marketing materials, we will only provide you with such marketing materials where we have obtained such consent from you.

4 Who do we give access to your personal data?

4.1 In connection with one or more of the purposes outlined above, we may disclose details about you to our subsidiaries or affiliated companies, or to other companies that provide services to us that reasonably require access to personal data relating to you

4.2 Please note that some of the recipients of your personal data referenced above may be based in countries outside of the European Union whose laws may not provide the same level of data protection. In such cases, we will ensure that there are adequate safeguards in place to protect your personal data that comply with our legal obligations. The adequate safeguard might be a data transfer agreement with the recipient based on standard contractual clauses approved by the European Commission for transfers of personal data to third countries.

Further details of the transfers described above and the adequate safeguards used by Van Hoorebeke Timber in respect of such transfers are also available from us by contacting info@vanhoorebeke.com.

4.3 We reserve the right to disclose your personal information as required by law, or when we believe that disclosure is necessary to protect our rights and/or in the framework of a judicial proceeding, court order, or request from a regulator.

5 How long do we retain your personal data?

We will retain your information for a reasonable period, i.e. the longest of the following periods: (i) as long as is necessary for the relevant activity or services; (ii) any retention period that is required by law; or (iii) the end of the period in which litigation or investigations might arise in respect of the services.

6 What are your rights?

6.1 You have the right to contact Van Hoorebeke Timber at any moment with a request to:

• obtain confirmation that we are processing your personal data and request a copy of the personal data we hold about you;• ask that we update the personal data we hold about you, or correct such personal data that you think is incorrect or incomplete;• ask that we delete personal data that we hold about you, or restrict the way in which we use such personal data if you believe that there is no (longer a) lawful ground for us to process it;• withdraw consent to our processing of your personal data (to the extent such processing is based on consent);• object to our processing of your personal data for which we use legitimate interest as a legal basis, in which case we will cease the processing unless we have compelling legitimate grounds for the processing.6.2 Especially with regard to the processing for direct marketing purposes, you have the right to object at any time to processing of personal data for such marketing by contacting us (see hereunder). In that event, the personal data shall no longer be processed for direct marketing purposes.

6.3 In order to exercise any of your rights above, you can send us a request, indicating the right you wish to exercise to the following email address: info@vanhoorebeke.com.

You may also use these contact details if you wish to make a complaint to us relating to your privacy.

6.4 If you are unhappy with the way we have handled your personal data or any privacy query or request that you have raised with us, you have a right to complain to the competent Data Protection Authority (“DPA”).

7 How to contact us? If you have any questions about this website or our Privacy Notice, you can e-mail us at info@vanhoorebeke.com.

8 Changes to this Privacy Notice We may modify or amend this Privacy Notice from time to time. Any changes we may make to our Privacy Notice in the future will be posted on this page. To let you know when we make changes to this Privacy Notice, we will amend the revision date at the top of this page. The new modified or amended Privacy Notice will apply from that revision date. Please check back periodically to see the latest version of this Privacy Notice.